2V0-621D · Question #101
Which keystore would a vSphere Replication administrator use to manually add an additional Certificate Authority certificate?
The correct answer is A. hms-truststore.jks. To manually add a Certificate Authority certificate for vSphere Replication, an administrator would import it into the hms-truststore.jks, which contains the certificates of trusted CAs.
Question
Which keystore would a vSphere Replication administrator use to manually add an additional Certificate Authority certificate?
Options
- Ahms-truststore.jks
- Bhms-keystore.jks
- Ccertificates.ks
- Dcacerts.ks
How the community answered
(46 responses)- A93% (43)
- C2% (1)
- D4% (2)
Why each option
To manually add a Certificate Authority certificate for vSphere Replication, an administrator would import it into the hms-truststore.jks, which contains the certificates of trusted CAs.
The hms-truststore.jks is the Java Trust Store used by the vSphere Replication appliance (HMS - Host-based Replication Service) to store certificates from trusted Certificate Authorities, which are necessary for establishing secure connections with other components like vCenter Server.
The hms-keystore.jks is the Java Key Store containing the vSphere Replication appliance's own private key and corresponding server certificate, not certificates of trusted Certificate Authorities.
certificates.ks is a generic name and not the specific trust store used by vSphere Replication for CA certificates.
cacerts.ks is a common default Java Trust Store, but vSphere Replication uses its own specific trust store, hms-truststore.jks, for its internal certificate management.
Concept tested: vSphere Replication certificate management (truststore)
Source: https://docs.vmware.com/en/VMware-vSphere-Replication/8.7/vsphere-replication-admin/GUID-2CFE2D07-D02A-4B6A-817B-64735E2D12B7.html
Topics
Community Discussion
No community discussion yet for this question.